Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier: KxYzPKGS4a1N+wXboe+G2wf/BEVjnVnmi19fjhtl7X0=
Subject key identifier: A2:43:C2:64:E8:41:65:3A:D7:05:8D:71:FE:AC:52:09:30:88:5E:C2
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial: 019650119887DE491941B63AB6327C442DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number: 0BB2
Signing time: Sat 19 Apr 2025 22:00:52 +0000
Manifest this update: Sat 19 Apr 2025 22:00:52 +0000
Manifest next update: Sun 20 Apr 2025 22:00:52 +0000
Files and hashes: 1: HI_761EI5uyGqmjrDCQMeEJHGzc.roa (hash: QB8Dmgi2EHb5963iec21h5u6pDxN6G7ySEepAThURJA=)
2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: us/3uu5lB3BHfocTYgIuJId+utr+llrw+IbnSs8L1q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:98:87:de:49:19:41:b6:3a:b6:32:7c:44:2d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
Validity
Not Before: Apr 19 22:00:52 2025 GMT
Not After : Apr 20 22:00:52 2025 GMT
Subject: CN=a243c264e841653ad7058d71feac520930885ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:ae:bc:4f:93:2c:6e:49:e2:b4:59:12:41:
e4:e1:1c:17:14:38:57:8a:68:db:82:12:02:92:68:
34:a2:5b:7f:2b:d7:16:27:de:75:48:ea:c7:42:3d:
17:0d:b0:26:a6:43:23:6c:5d:dc:77:53:34:62:ec:
d7:c8:e8:ed:78:4f:99:e8:46:1c:f8:30:81:91:c8:
48:96:b2:a5:9f:8d:0c:e4:0d:b7:e5:d3:69:35:6f:
75:be:b4:08:4d:18:11:a2:0d:5b:eb:44:ef:7f:c4:
ed:43:82:45:c5:79:97:09:9e:79:39:f2:aa:0a:e9:
3b:a6:e3:ba:ee:97:35:d8:50:02:f9:23:ad:7b:8f:
d0:89:71:0f:da:9d:da:33:b4:25:e2:99:c7:8e:e6:
76:af:65:cd:b9:48:1d:90:8c:e6:ae:f9:00:75:2e:
99:2c:29:45:2d:69:4f:fb:c7:aa:b7:5d:c8:f6:22:
a7:34:7f:81:29:f7:56:78:93:0e:d4:19:5d:9e:b6:
f7:92:d1:47:c4:67:cc:a9:a9:94:37:0f:9c:de:6e:
b6:8a:b9:6c:aa:a9:91:03:54:bf:d7:18:6a:4b:44:
85:f0:3d:98:e2:64:e4:0f:ae:e4:9e:cf:f0:79:a5:
de:7b:82:17:c2:96:3a:f3:67:b9:a1:31:03:bb:81:
ec:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:43:C2:64:E8:41:65:3A:D7:05:8D:71:FE:AC:52:09:30:88:5E:C2
X509v3 Authority Key Identifier:
keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2f:b1:4b:3a:a5:5b:11:d5:d2:19:bd:96:62:c2:b0:89:da:
37:3b:f0:ca:93:b7:08:b1:e1:77:81:81:6f:48:e0:e0:c8:7d:
70:3a:e9:96:37:c3:71:98:51:4c:4f:3e:29:b8:69:f9:12:f5:
5f:ea:84:28:2a:5d:b0:23:37:cf:de:2b:fb:2c:4c:64:15:96:
e9:18:0a:8a:20:39:7c:9e:a6:8d:cd:f0:75:b9:d7:16:fb:78:
5b:e6:2d:c6:e8:af:d5:c8:7f:67:09:b3:8f:be:a5:66:52:41:
71:04:66:c0:85:17:69:18:63:07:c1:2b:be:2b:ed:9c:ca:6a:
30:7c:97:bc:57:1e:59:12:df:fc:97:f3:b3:46:7b:f3:a8:73:
86:05:be:38:c9:cb:55:ef:4e:60:21:a1:bb:1d:2a:f4:df:ad:
96:a3:7d:f1:49:f4:64:18:6a:ce:46:c1:8e:d6:cd:11:7d:ae:
52:88:06:4d:66:8d:e3:2b:dc:3e:4e:93:95:81:1f:9d:36:ef:
0e:92:f0:e6:40:88:e4:ed:d8:90:76:e3:82:92:4e:9a:88:21:
73:75:b5:73:4f:84:6d:1b:eb:df:19:13:63:d3:7b:f2:da:42:
ce:aa:05:13:b5:dc:4b:5b:17:26:d6:79:8d:39:9d:5d:8a:31:
80:fa:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:09 2025 by rpki-client